hashcat Forum
hcxdumptool - missing frames w/ filtering - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: hcxdumptool - missing frames w/ filtering (/thread-11212.html)

Pages: 1 2 3 4 5 6


RE: hcxdumptool - missing frames w/ filtering - ZerBea - 01-25-2023

Thanks for your observations. This is very helpful to improve the tools.
At the moment I'm working on better support of Realtek drivers.
Some good news here: latest git head of hcdumptool/hcxlabtool provide support
for Realtek rt8xxxu devices:
https://github.com/kimocoder/realtek_rtwifi
tested devices are here:
https://github.com/kimocoder/realtek_rtwifi/issues/34
and rt88xxau devices:
https://github.com/aircrack-ng/rtl8812au
https://github.com/aircrack-ng/rtl8814au


Arch Linux information is here:
https://archlinuxarm.org/wiki

Prepare SD-card
Code:
sudo fdisk /dev/sdx
o p n p 1 <ret> +100M t c n p 2 <ret> <ret> w

sudo mkfs.fat -F32 /dev/sdx1
sudo mkfs.ext4 /dev/sdx2

mkdir boot
mount /dev/sdx1 boot
mkdir root
mount /dev/sdx2 root

Download Arch:
http://dk.mirror.archlinuxarm.org/os/
e.g.:
http://dk.mirror.archlinuxarm.org/os/ArchLinuxARM-rpi-armv7-latest.tar.gz

and extract it to SD card:
Code:
tar -xvf ArchLinuxARM-rpi-armv7-latest.tar.gz -C root
sync
mv root/boot/* boot
sync
umount boot root

Put SD card into RPI and boot.
Than do the final installation (as explained in Arch wiki)


RE: hcxdumptool - missing frames w/ filtering - pipss - 01-26-2023

Trying to disable onboard Bluetooth, HDMI and WiFi at boot by adding
Code:
dtoverlay=disable-wifi
dtoverlay=disable-bt
hdmi_blanking=1
to /boot/config.txt This code worked in _Kali, but crashes Archlinux. 

Could you please advice correct code to disable onboard Bluetooth, HDMI and WiFi at boot for Archlinux? Unfortunately very little info around regarding Archlinux compare to _Kali. Thank you.


RE: hcxdumptool - missing frames w/ filtering - ZerBea - 01-26-2023

here we go:

config.txt
Code:
gpu_mem=64
initramfs initramfs-linux.img followkernel
max_usb_current=1
hdmi_blanking=1
dtoverlay=pi3-disable-bt
dtoverlay=pi3-disable-wifi
dtparam=audio=off
dtparam=watchdog=on
disable_splash=1
dtparam=act_led_trigger=none
dtparam=act_led_activelow=on
dtparam=pwr_led_trigger=none
dtparam=pwr_led_activelow=off

cmdline.txt
Code:
root=/dev/mmcblk0p2 rw rootwait console=serial0,115200 console=tty1 selinux=0 plymouth.enable=0 smsc95xx.turbo_mode=N dwc_otg.lpm_enable=0 kgdboc=serial0,115200

enable watchdog:
Code:
pacman -S watchdog

nano /etc/watchdog.conf
watchdog-device = /dev/watchdog
watchdog-timeout = 15
max-load-1 = 24

systemctl enable watchdog.service

enable auto-login:
Code:
cp /usr/lib/systemd/system/getty@.service /etc/systemd/system/autologin@.service
nano /etc/systemd/system/autologin@.service
ExecStart=-/sbin/agetty  -a root --noclear %I $TERM
Type=simple

Disable the old getty service and enable the new autologin service.
Code:
systemctl disable getty@tty1
systemctl enable autologin@tty1
systemctl disable shadow.service
systemctl disable shadow.timer

Hide kernel messages from terminal
Code:
/etc/sysctl.d/20-quiet-printk.conf
kernel.printk = 3 3 3 3

Enable fake hw clock:
Code:
pacman -S fake-hwclock

systemctl enable fake-hwclock fake-hwclock-save.timer
systemctl start fake-hwclock



RE: hcxdumptool - missing frames w/ filtering - pipss - 01-28-2023

Well, tried wifi_labtools w/ ArchLinux vs _Kali on RPi4-8GB
AP was ON. Three clients were connected: printer, Android 8 and Android 9 phones. Scanning time 5 minutes.
Hashlines obtained by ArchLinux: 4 hashes from printer, 2 hashes from Android 8 and 1 hash from Android 9.
Hashlines obtained by _Kali: 3 hashes from printer, 1 hash from Android 8 and 1 hash from Android 9.
Power consumption was around 4W for both ArchLinux and _Kali.
7:5 ArchLinux won 🏆

Now problem is that ArchLinux is so tricky to run that I was able to install and run labtools only. After that pacman was broken and I just gave up using it. Full upgrade -Syu makes ArchLinux unbootable system on my RPi4.

A found Manjaro is based on ArchLinux too, like kids version Smile. Indeed system itself runs very smoothly and after -Syu it work perfectly, but again problem with how to install wifi-labtools. After installing packages (make, gss and git) I tried to install wifi-labtools, but got error:
Code:
$ sudo make install
cc -O3 -Wall -Wextra  -o hcxlabgetm1 hcxlabtool.c -DGETM1 -DSTATUSOUT
make: cc: No such file or directory
make: *** [Makefile:10: build] Error 127
I guess something still missing in Manjaro, but so far could find any solution. Could you please advice?


RE: hcxdumptool - missing frames w/ filtering - pipss - 01-28-2023

Upd: solution found need to install compiler too:
$ sudo pacman -Syu base-devel --needed


RE: hcxdumptool - missing frames w/ filtering - pipss - 01-28-2023

Manjaro on RPi4 is tested: 5 minutes scan and 1 hashline from printer only. Exactly the same result as from VMware setup.

Trying now fix ArchLinuxarm installation issue, as Arch looks like fastest solution around Smile


RE: hcxdumptool - missing frames w/ filtering - pipss - 01-29-2023

Now testing ArchL and while installing hcxtools via git, i got error:
Code:
hcxpmktool.c:624:56: warning: format '%ld' expects argument of type 'long int', but argument 3 has type 'size_t' {aka 'unsigned int'} [-Wformat=]
  624 |                        fprintf(stderr, "\nPMK error %ld\n", strlen(pskstring));
      |                                                      ~~^    ~~~~~~~~~~~~~~~~~
      |                                                        |    |
      |                                                        |    size_t {aka unsigned int}
      |                                                        long int
      |                                                      %d

But installation of hcxtools via package manager is ok. 

Another issue while checking injection got error:
Code:
packet injection is working on 2.4GHz!
injection ratio: 17% (BEACON: 734 PROBERESPONSE: 130)
your injection ratio is poor - improve your equipment and/or get closer to the target
antenna ratio: 39% (NETWORK: 28 PROBERESPONSE: 11)
your antenna ratio is average, but there is still room for improvement
2 radiotap errors encountered during the test


The third issue can't install the 8814au driver:
Code:
make ARCH=armv7l CROSS_COMPILE= -C /lib/modules/5.15.89-3-rpi-ARCH/build M=/home/alarm/rtl8814au  modules
make[1]: Entering directory '/home/alarm/rtl8814au'
make[1]: *** /lib/modules/5.15.89-3-rpi-ARCH/build: No such file or directory.  Stop.
make[1]: Leaving directory '/home/alarm/rtl8814au'
make: *** [Makefile:2353: modules] Error 2

Could you please advice?


RE: hcxdumptool - missing frames w/ filtering - ZerBea - 01-29-2023

First problem (gcc warning) is fixed by this commit, now:
https://github.com/ZerBea/hcxtools/commit/c97e632956ee5e0244c9a412b81d1a1024ade7fb

Second problem:
everything < 10 radiotap ERRORs is ok (depend on the driver)

Third problem:
Linux Header package (linux-headers) is not installed.


RE: hcxdumptool - missing frames w/ filtering - pipss - 01-30-2023

Upd: per advise from ArhLinuxarm forum, need to wait for new headers Smile


RE: hcxdumptool - missing frames w/ filtering - pipss - 02-01-2023

Could you please advise how to disable onboard Bluetooth, HDMI and WiFi at boot for Debian (bookworm) on RPi4?